Merge pull request DuendeArchive#713 from RaisonBlue/exchange_code_with_client_secret

brockallen · web-flow · commit 4b2542452eb9 · 2018-12-13T10:21:36.000-05:00
Use client_secret for code exchange in Auth Code Flow
diff --git a/src/ResponseValidator.js b/src/ResponseValidator.js
@@ -237,11 +237,12 @@ export class ResponseValidator {
     _processCode(state, response) {
         var request = {
             client_id: state.client_id,
+            client_secret: this._settings.client_secret,
             code : response.code,
             redirect_uri: state.redirect_uri,
             code_verifier: state.code_verifier,
         };
-
+        
         return this._tokenClient.exchangeCode(request).then(tokenResponse => {
             
             for(var key in tokenResponse) {
